CVE-2013-1624: The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check…

Unscored severity · published Feb 8, 2013

CVE-2013-1624

The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check…

–

CVSS

EPSS

On KEV

Description

The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.

Exploitation

Is it being used?

Exploit prediction (EPSS)3.0% · higher than 87% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Bc-java · Bouncycastle

1.01; 1.02; 1.03; 1.04; 1.05; 1.06; +34 more · source: NVD

Legion-of-the-bouncy-castle-c#-cryptography-api · Bouncycastle

0.0; 1.0; 1.1; 1.2; 1.3; 1.4; +3 more · source: NVD